Which of the following is the MOST important reason to conduct interviews as part of the business impact analysis (BIA) process?

Question

Options

• ATo facilitate a qualitative risk assessment following the BIA
• BTo obtain input from as many relevant stakeholders as possible
• CTo ensure the stakeholders providing input own the related risk
• DTo increase awareness of information security among key stakeholders

• A
  3% (1)
• B
  76% (28)
• C
  14% (5)
• D
  8% (3)

Explanation

A Business Impact Analysis (BIA) identifies the effects of disruptions on business functions and determines recovery priorities. The MOST important reason to conduct interviews is to obtain input from as many relevant stakeholders as possible (B). The BIA's validity depends on gathering comprehensive, accurate information about critical processes, dependencies, and recovery requirements from the people who actually run those processes. Broader stakeholder input produces more complete and reliable BIA results. Option A (facilitating a qualitative risk assessment) is a separate activity - a BIA focuses on business impact, not risk assessment methodology. Option C (ensuring stakeholders own the related risk) conflates risk ownership with subject matter expertise; the goal is knowledgeable input, not risk accountability. Option D (increasing security awareness) is a secondary benefit of interviews, not their primary purpose in a BIA. Comprehensive stakeholder input is what makes a BIA accurate and actionable.

No community discussion yet for this question.